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IN THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A proxy device for performing malware scanning of files stored 
within a file storage device of a computer network, the computer network having a 
plurality of client devices arranged to issue access requests using a dedicated file access 
protocol to the file storage device in order to access files stored on the file storage device, 
the proxy device being arranged so as to intercept access requests issued to tiixe file 
storage device, and comprising: 

a fu:st interface for receiving an access request issued by one of said client devices 
to said file storage device using the dedicated file access protocol; 

a second interface for communicating with the file storage device to cause the file 
storage device to process the access request; 

processing logic for causing selected malware scanning algorithms to be executed 
to determine whether the file identified by the access request is to be considered as 
malware; 

wherein the processing logic is responsive to configuration data to determine 
which malware scaimiog algorithms should be selected for a patticxilar file, the proxy 
device furflier comprising a scanning enguie to execute the malware scarming algorithms 
selected by the processing logic; 

wherein each device in the computer network is assigned an identifier, and the 
proxy device is assigned tiie same identifier as is assigned to the file storage device, the 
first interface being coonectable to a communication infirastrocture of the computer 
network to enable communication between the proxy device and said client devices, and 
the file storage device being connectable to the second interface such that the file storage 
device is only accessible by said client devices via said proxy device; 

wherein the second inter&ce is configured to enable a plurality of file storage 
devices to be cormected to the proxy device, each file storage device having a different 
identifier, and the proxy device being assigned multiple identifiers corresponding to ttie 
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identifiers of die cozmected file storage devices^ the first interface being configvured to 
receive any access requests issued to one of said connected file storage devices; 

wherein, upon receipt of the a ccess request fiom a client device, the processing 
logic is arran p rgd tn determine from the access tequest predetemiined attributes, and to 
send those predetenp ined attri butes to the file storage device to enable the file storage 
device to perform a validation check, the proces gitiR only allowing the access 
request to proceed if the file storage device confirms that the client device is allowed to 
access the file identified by the file access request: 

wherein the plurality of client devices are allowed direct access to the file storage 
device if the proxy device fails , 

2- (Original) A proxy device as claimed in claim 1, wherein the dedicated file access 
protocol is the Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file storage device. 

3. (Original) A proxy device as claimed in claim 1^ wherein the dedicated file access 
protocol is the Network File System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device. 

4. (Cancelled) 

5. (CanceUed) 

6. (Cancelled) 

7. (Cancelled) 

8. (Original) A proxy device as claimed in claun 1 . further comprising a file cache for 
storing files previously accessed by the client devices, upon receipt of an access request 
identifying a file to be read from the file storage device, the processing logic being 
arranged to determine whether the file identified by the access request is stored in tiie file 
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cache and if so to return the file to flie client device without communicating with the file 
storage device via the second interface. 

9. (Original) A p^xy device as claimed in claim 8, wherein the file cache is arranged 
only to store files which have been determined not to be considered as malwaie. 

10. (Canceled) 

1 1. (Currently Amended) A proxy device as claimed in claim further comprising a 
user cache for storing the predetermined attributes. 

12. (Currently Amended) A balanced proxy system for performing malware scanning of 
files stored within a file storage device of a computer network, the computer network 
having a plurality of client devices arranged to issue access requests using a dedicated file 
access protocol to the file storage device in order to access files stored on the file storage 
device, the balanced proxy system comprising: 

a plurality of proxy devices as clahned in claim 1 arranged so as to intercept 
access requests issued to the file storage device; and 

a passive load balancing mechanism arranged to configure each client device to 
communicate with a particular proxy device in said plurality, such that a^e access 
request issued by a particular client device will be directed to a predetermined one of said 
proxy devices dependent on how that client device was configured by the passive load 
balancing mechanism. 

13. (Currently Amended) A method of operating a proxy device to perform malvraxe 
scanning of files stored within a file storage device of a computer network, the computer 
network having a plurality of client devices arranged to issue access requests using a 
dedicated file access protocol to the file storage device in order to access files stored on 
the file storage device, the proxy device being arranged so as to intercept access reqfaests 
issued to the file storage device, and the method conq}rising the steps of: 
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(a) receiving an access request issued by one of said client devices to said file 
storage device using the dedicated file access protocol; 

(b) communicating with the file storage device to cause the file storage device to 
process the access request; and 

(c) causing selected malware scanning algorithms to be ^ecuted to detennine 
Aether flie file identified by the access request is to be considered as malware; 

wherein said step (c) comprises the steps of: 

responsive to configuration data, determining which malware scanning aigoridsms 
should be selected for a particular file; and 

employing a scanning engine to execute the malware scanning algorithms selected 
by said determining step; 

wherein each device in the computer network is assigned an identifier, the proxy 
device being assigned a unique identifier different to the identifier of the file storage 
device, the method fiirtfaer c omprising the steps of: 

connecting the client devices, the proxy device and the file storage device to a 
conmnmication infrastructure of the computer network; 

configuring the client devices such that access reqxiests issued by the client 
devices are routed to the proxy device; and configuring the file storage device to send 
processed access requests to the proxy device;, 

upon receipt of the access request from a client device, determining firom flxe 
access request predetermined attributes: sending those predetermined attributes to the file 
storage device to enable flie file storage device to perform a validation check: and 

only allowing the access request to proceed if the file storage device confirms that 
the client device is allowed to access the file identified bv flie file access reauesfc 

wherein the plurality of client devices are allowed direct access to the file stoy^g^ 
device if the proxy device fails, 

14. (Origmal) A method as claimed in claim 13, wherein the dedicated file access 
protocol is the Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file storage device. 
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15. (Origiiial) A method as claimed in claim 13» wherein the dedicated file access 
protocol is the Netwotk File System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device- 

16. (CanceUed) 

17. (Cancelled) 

18. (Cancelled) 

19. (Cancelled) 

20. (Original) A method as claimed in claim 13, further comprising the steps of; 

storing within a file cache files previously accessed by the client devices; 

upon receipt of an access request identifying a file to be read fiom the file storage 
device, determining whether the file identified by the access request is stored in the file 
cache and if so returning the file to the Client device without communicating with the file 
storage device. 

21 . (Original) A method as claimed in claim 20, wherein the file cache is arranged only to 
store files which have been deteimined not to be considered as malware. 

22. (Canceled) 

23 . (Currently Amended) A method as claimed in claim 3ai3. further comprising the step 
of storing within a user cache the predetermined attributes. 

24. (Original) A method as claimed in claim 13, wherein a plurality of said proxy devices 
are provided, the method further comprismg the step of employing a passive load 
balancing mechanism to configure each client device to communicate with a particular 
proxy device in said plurality, sudi that an access request issued by a particular client 
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device will be directed to a predetennined one of said proxy devices dependent on how 
that client device was configured by the passive load balancing mechanism. 

2S. (Currently Amended) A computer program product operable to configure a proxy 
device to perform a method of malware scanning of files stored within a file storage 
device of a computer network, the compute network having a plurality of client devices 
arranged to issue access requests using a dedicated file access protocol to the file storage 
device in order to access files stored on the file storage device, the proxy device being 
arranged so as to intercept access requests issued to the file storage device, and the 
computer program product comprising: 

(a) reception code operable to receive an access request issued by one of said 
client devices to said file storage device using the dedicated file access protocol; 

(b) communication code operable to communicate with the file storage device to 
cause the file storage device to process the access request; and 

(c) algorithm invoking code operable to cause selected malware scanning 
algorithms to be executed to determine whether the file identified by the access request is 
to be considered as malware; 

wherein said algorithm invoking code is operable to determine, responsive to 
configuration data, which malware scanning algorithms should be selected for a 
paxticular file, and the computer program product fiirther comprises scanning engine code 
responsive to said algorithm invoking code and operable to execute the malware scanning 
algorithms selected by said algorithm invoking code; 

wherein each device in the compute network is assigned an identifier, the proxy 
device being assigned a unique identifier different to the id^tifier of the file storage 
device^ the client devices, the proxy device and the file storage device being connectable 
to a communication infiastracture of the computer network, the client devices being 
configured such that access requests issued by the client devices are routed to the proxy 
device, and die file storage device being configured to send processed access requests to 
the proxy device; 

wherein said r eception code is operable^ upon receipt of the access request fi:om a 
client devic e, to determine &om the access request predetermined attributes, the 
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mnnnunication code being oiierahle to s end those DreH^Tfttt;^iped attributes to tixe file 
fftoraae device ty » flnahle tfie file storage device to petfonn a validation chwk, »e accgss 
req uest only heinp flUowed to nfoceed if fee file stora ge device confinns that tfic plignt 
device is allowed to access the file identified bv the ffle access i^uegfc 

wherein the plurality of cUent devic es ne allowed direct access to the file Storage 
dgyice if the nroxv device fails. 

26. (Original) A computer program prt)duct as claimed in claim 25, vdierdn the dedicated 
file access protocol is the Server Message Block (SMB) protocol, and the access requests 
are SMB calls issued to the file storage device. 

27. (Original) A computer program product as claimed in claim 25, wherdn the dedicated 
file access protocol is the Network File System (NFS) protocol, and the access requests 
are NFS caUs issued to the file storage device. 

28. (CanceUed) 

29. (Cancelled) 

30. (CanceUed) 

31. (Cancelled) 

32. (Original) A coniputar program product as claimed in claim 25. fiirther comprising; 

caching code operable to store within a file cache files previously accessed by the 
client devices; 

the reception code being operable, upon receipt of an access request identifying a 
file to be read fiom the file storage device, to determine whether Ha file identified by the 
access request is stored in the file cache and if so to cause the file to be returned to the 
client device witiiout the communication code communicating with the file storage 
device. 
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33. (Original) A computer pxogram product as claimed in claim 32, wherein the file cache 
is airanged only to stoie files which have been determined not to be consideied as 
malware. 

34. (Canceled) 

35. (Currently Amended) A computer program product as claimed in claim 3425, further 
comprising storing code operable to store within a user cache tiie predetennined 
attributes. 

36. (Original) A computer program product as claimed in claim 25, wherein a plurality of 
said proxy devices are provided, the computer program product further comprising 
passive load balancing code operable to configure each client device to conununicate 
with a particular proxy device in said plurality, such that an access request issued by a 
particular client device will be directed to a predetermined one of said proxy devices 
dependent on how that client device was configured by the passive load balancing code. 

37. (Previously Presented) A proxy device as claimed in claim 1, wherein the processing 
logic determines whether the selected malware scanning algorithms are required to be run 
on the file before causing the selected malware scanning algorithms to be executed, 

38. (Previously Presented) A proxy device as claimed in claim 37, wherein Ihe 
determination is made according to additional configuration data specifying when 
scanning should be performed and the types of files that should be scanned 

39. (Previously Presented) A proxy device as claimed in claim 1 , wherein for a plurality 
of file storage devices on the computer network, a plurality of proxy devices are provided 
such that each file storage device is associated with one of die proxy devices. 
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40. (Previously Presented) A proxy device as claimed in claim 1, wherein for a pluraUty 
of file storage devices on the computer netwoik, the proxy device is associated with all of 
&e file storage devices. 

41 . (Cuirently Amended) A proxy device as claimed in claim 40, wherein the proxy 
device is associated with all of the file storage devices when aaiaifflal^canning of files is 
performed. 

42. (Previously Presented) A method as claimed in clahn 13, vrfherein a computer 
network administrator has direct access to the file storage device, 

43. (Canceled) 

44. (Currently Amended) A proxy device as claimed in claim -WL wherein the 
predetermined attributes include a user name, a password of the user making the access 
request, a domain of the client device, an indication of the file to be accessed and an 
address of the client device. 
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